Skip to content
OpenAdvisories
High · 8.6 CVE-2022-23425 EUVD-2022-28502GHSA-2j2j-ch6x-37m4

Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with…

Published Feb 11, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices P(9.0), Q(10.0), R(11.0), S(12.0) with select Exynos devices – < SMR Feb-2022 Release 1 SMR Feb-2022 Release 1

References